quitwheel[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

quitwheel.exe
Size

5KB
MD5

61fc50a2c207f5f9842c922f89976a34
SHA1

292fbce73976a202c232600206d4505ea1ecebe8
SHA256

ba8abe1e0e066477a2a7bdcffd736a93d604a91d3562703df01d0fbb8d8c2b0d
SHA512

274e633c4a93c632aeb221e584f906add92e53df9f9e5355aa7c9d0e2fb4b9e51478aa2d2714b65aa8b1ff9a8956090cc715abea9fd60f54ead5c0379a64181f
SSDEEP

96:QO1elXuvnBNC+LxOui8chWXhVxNCZfN0VgzNt9:lPB410RVzA6ij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quitwheel.exe

Files

quitwheel.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Noah\source\repos\quitwheel\quitwheel\obj\Debug\quitwheel.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ